Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-18686

bucket_admin should not be allowed to create-bucket via couchbase-cli

    XMLWordPrintable

Details

    • Bug
    • Resolution: Duplicate
    • Major
    • 4.5.0
    • 4.5.0
    • ns_server, tools
    •  4.5.0-1759 Enterprise Edition (build-1759)

    Description

      1. Configure CB Server with LDAP and create a LDAP user in LDAP server.
      2. Configure the user created in 1 with role as bucket_admin[*]
      3. From couchbase-cli, try and create a bucket using the user 1 that has role bucket_admin[*]

      [root@cherry-s10126 bin]# /opt/couchbase/bin/couchbase-cli bucket-create --cluster=localhost -u ritam123  -p password --bucket=default --bucket-type=couchbase --bucket-port=11211 --bucket-ramsize=200 --bucket-replica=1 --wait
      		 
      ...SUCCESS: bucket-create

      User role:

      [root@cherry-s10126 bin]# curl -X GET http://Administrator:password@localhost:8091/settings/rbac/users
      		 
      [{"name":"ritam","id":"ritam123","roles":[{"role":"bucket_admin","bucket_name":"*"}]}]

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            artem Artem Stemkovski
            ritam.sharma Ritam Sharma
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty